Re: folders created with cyradm not deletable by cyradm

2005-03-30 Thread Earl R Shannon
Hello, I think you are getting caught on two things. The IMAP protocol itself has this concept of an "inbox". In cyrus, the user's inbox folder name is usually user., where is replaced with the id of the person logging in. Second, anyone, including the admin user, must be granted explicit rights

Re: Basic FAQs and HOWTOs

2005-02-15 Thread Earl R Shannon
Hello, Google for Naked Ape Consulting. Seems like I remember them/him posting something in the last week or so about some work that's been done on some documentation. It should be in the list archives also. Regards, Earl Shannon Forrest Aldrich wrote: I'm new to Cyrus IMAPD & SASL2. For the ti

Re: Restrict IMAP usage to certain hosts

2005-02-04 Thread Earl R Shannon
Hello, Frankly, I'd ask you to justify having to meet both conditions. If they can use Webmail, why not let them use a "real" client? That's what we do here at NCSU. That said, since you say you can meet condition 1, You might create a proxy user who does all logins from the Webmail service. Users

Re: Software Quality rant (was Re: Large email account)

2004-12-21 Thread Earl R Shannon
Hello, I don't want to sound like I'm defending poorly written software. BUT, If it doesn't look pretty people won't want to use it. And if no one is going to use your software, why write it? Again, I'm not defending insecure and otherwise poorly written software. I'm saying that users want pretty

Compiling Sieve

2004-12-03 Thread Earl R Shannon
Hello, We are preparing to migrate an older cyrus install to a newer one. One of the things we are having to address are the sieve scripts being compiled to byte code. We've not yet found an complete answer to how a script goes from "text on my client" to "byte code on the server". We've been using

Re: General IMAP functionality

2004-11-02 Thread Earl R Shannon
Hello, Comments are imbedded below. Warrick FitzGerald wrote: Posted this last night, but did not see it come through ... sorry about the re-post if you have this already. I’m in the process of moving an office of POP3 users to IMAP, and realized that that I don’t fully understand h

Re: imtest fails w/ "Authentication failed. no mechanism available"

2004-11-02 Thread Earl R Shannon
Hello, I see the PLAIN mech being advertised by the server. I'd check and make sure the SASL libraries can be found by the imtest client. Regards, Earl Shannon OpenMacNews wrote: hi all, i've newly built/installed: exim-4.43 cyrus-imap-2.28 cyrus-sasl-2.1.19 on OSX 10.3.5 plu

Re: ACL for pop-only ?

2004-10-15 Thread Earl R Shannon
Hello, This sounds a bit drastic. It prevents the server from being used as an IMAP server. IMHO, the "proper" way to do this is to have some form of directory, ldap, hesiod, ( or whatever ) track whether or not a user has a POP or IMAP account. The server then behaves accordingly. This isn't built

Re: imap scalability

2004-10-07 Thread Earl R Shannon
Hello, I would in addition recommend that you run your MTA on a seperate machine(s). If you do use some form of spam/virus filtering keeping it off the IMAP/POP servers would probably leave you in a better position, both in terms of performance and management. Use LMTP to deliver mail to the IMAP s

Re: Funding Cyrus High Availability

2004-09-17 Thread Earl R Shannon
Hello, All that you say is true. But for performance one either buys bigger and better or multiple machines to spread the load. Murder allows one to buy multiple machines. All I am saying is that improving perforance may already be done. I believe redundancy in the application is more important at

Measuring usage

2004-09-15 Thread Earl R Shannon
Hello, I'd like to get some feedback on how people measure usage on thier IMAP servers by their users/clients. Have you built any tools to do this? I have found and am looking over the logwatch stuff in the wiki, but am curious about the possible existance of other tools, and ways to actually defi

Re: timsieved auth problem

2004-08-13 Thread Earl R Shannon
Hello, I don't think those method's get advertised unless SSL in already negotiated. Regards, Earl Shannon Didi Rieder wrote: Hi again, we are running cyrus-2.2.8 with sasl-2.1.19. Our sasl authentication settings in imapd.conf are: sasl_pwcheck_method: saslauthd sasl_mech_list: PLAIN LOGIN sasla

Re: Redhat ES3.0 update cannot find gssapi library

2004-07-28 Thread Earl R Shannon
Hello, One way to fix this is to specify the -I and -L flags to the compiler with the appropriate paths. I use a script to call configure which first sets up the various environment variables for our environment. Something like #!/bin/csh setenv CFLAGS "-I/usr/kerberos/include -I/local/openssl/incl

Re: MURDER or IMAP proxy solution ?

2004-07-01 Thread Earl R Shannon
Hello, Well, the uniform name space means a couple of things. First, each user's account has a unique name. Not just on the IMAP server where their account resides, but across all the IMAP servers that are part of the MURDER. This allows the accounts to be on any machine in the MURDER. This allow

Re: System-wide sieve filter

2004-06-18 Thread Earl R Shannon
Hello, Amavis is a milter and is not part of the Cyrus package. What it would do with the extension listed is change the deliver to address by suffixing it with "+spam". The "+" address indicates to the final delivery agent, usually lmtpd for cyrus, to put the message in the specified folder. So a

Re: shared folders?

2004-03-15 Thread Earl R Shannon
Hello, I haven't seen one yet. Doesn't mean there's not one out there. Real quickly. Create the folder. Give people who need access the necessary ACL. It's pretty much that simple. Here at NCSU I've set up a seperate server for shared folders. This causes some problems of its own since we have no

Re: Cyrus IMAPd, SASL, GSSAPI, Proxy Authorization

2004-03-15 Thread Earl R Shannon
Hello, It would help to see the imapd.conf file for the server in question. That said, is the user jablko listed in the imapd.conf file on the proxyservers list? ie: proxyservers: jablko Regards, Earl Shannon [EMAIL PROTECTED] wrote: I'm attempting to connect to the Cyrus IMAPd mailbox "admin" on

Re: Bad index files.

2004-03-15 Thread Earl R Shannon
m: Rob Siemborski <[EMAIL PROTECTED]> On Wed, 3 Mar 2004, Earl R Shannon wrote: > The stop/start is when this seems to happen. Is it not possible that > imapd processes are being SIGKILLed and leaving the index files > in an untenable state? The "running"

Re: global sieve script?

2004-03-05 Thread Earl R Shannon
Hello, My two cents worth on how to make it work. It would have to go through lmtpd twice. Terribly inefficient I'm sure, and I'll bet some people are cringing as we read. The first pass through is for the global sieve script(s). Handled on a per domain basis, or maybe for the server if you tru

Re: Bad index files.

2004-03-03 Thread Earl R Shannon
untenable state? Regards, Earl Shannon Rob Siemborski wrote: On Wed, 3 Mar 2004, Earl R Shannon wrote: It sounds like the index files themselves are corrupt, but the existence of .new files are almost certainly a red herring. If so, how can we prevent the corruption from occuring? It always seems

Re: Bad index files.

2004-03-03 Thread Earl R Shannon
Hello, Answers to queries below their respective question. Rob Siemborski wrote: On Wed, 3 Mar 2004, Earl R Shannon wrote: Well, then. I'm at a loss to understand the behavior we see. Users can't connect to their account. Go look and see the .NEW files. Hm. Run a reconstruct an

Re: Bad index files.

2004-03-03 Thread Earl R Shannon
n fix what actually is broke. Thanks. Regards, Earl Shannon Rob Siemborski wrote: On Wed, 3 Mar 2004, Earl R Shannon wrote: The index files suffixed with .NEW are left behind apparently in some unrecoverable state. If not fixed with a reconstruct the user is unable to access their account. The

Bad index files.

2004-03-03 Thread Earl R Shannon
Hello, I've got a question about the behavior we see when we shut down the imap server processes. When the master gets killed and the imap processes start to go away the state of the index files in some of the user accounts seems to become corrupted for some users. While a small percentage doe

Re: folder pointing to another IMAP server?

2004-02-05 Thread Earl R Shannon
Hello, I don't think you've really given us enough information. Are both servers cyrus? I understand from your posting that at least one will be. I have multiple servers configured in my email client ( Mozilla ) but they are all cyrus. That shouldn't be a requirement however. The drawback for most

Proper shutdown of cyrus IMAP server.

2004-02-03 Thread Earl R Shannon
Hello, We've recently experienced problems with some of the cyrus index files in user account getting suffixed with .NEW and not going away. Their presence indicates a problem with the account. We are currently guessing that the files are being left as a result of the server being shutdown and th

Re: Shared folders question...

2004-01-28 Thread Earl R Shannon
Hello, I've not seen anything per se myself. We've set up a shared folder service here at NCSU. Things to be aware of are the form of the email address to deliver to the shared mailbox/folder, permissions to allow the mail delivery to occur, ie. give the user anyone an ACL with at least p in it. S

Re: Using singleinstancestore on a large scale (thousands of recipients)

2004-01-13 Thread Earl R Shannon
Hello, I may have made an invalid assumption. The perl script I mentioned in my last post runs on the IMAP server itself. No need for an MTA to get involved. I assumed the initial poster was doing the same. BTW, deliver is simply a wrapper to lmtpd on the IMAP server. A little overhead exec'ing an

Re: Using singleinstancestore on a large scale (thousands of recipients)

2004-01-13 Thread Earl R Shannon
Hello, We use a perl script to do what we call a "broadcast". It loops through and delivers to each individual user. Probably not very efficient, particularly since we have thousands of accounts as well, but it was quick to implement and it works. Regards, Earl Shannon Sebastian Hagedorn wrote: Hi

Re: server sizing question

2003-12-29 Thread Earl R Shannon
Hello, I can't comment on a comparison since I've never heard of cucipop. What I can do is tell you what we run here at NCSU. We currently have 4 servers but plan to add 4 more. The servers are Sun Enterprise 220R's with 2 Gig of memory. We have over 10,000 accounts per machine. Not all are active

Re: Large cyrus install surver

2003-12-03 Thread Earl R Shannon
Hello, Information provided below. Regards, Earl Shannon [EMAIL PROTECTED] wrote: Hi, I'm looking at setting up IMAP servers for a mid-sized (2,000-3,000) company with several sites around the world. I've run Cyrus myself for years, and I'm very happy with it. But, I'd like to collect some co

Re: received date and reconstruct

2003-11-20 Thread Earl R Shannon
STDERR and mails it to a specified address. It was easier to use the in place infrastructure of cron and our wrapper than do something as an event. Regards, Earl Shannon Ken Murchison wrote: Earl R Shannon wrote: Hello, I'd suggest you investigate the ipurge command that comes with cyrus. It c

Re: received date and reconstruct

2003-11-20 Thread Earl R Shannon
Hello, I'd suggest you investigate the ipurge command that comes with cyrus. It can be run from a cron job and delete messages based on specified criteria, including age. Hm. Not sure though how it determines age. Regards, Earl Shannon Andrew J Caird wrote: Strangely, I need to do something very s

Re: Hight Aviability and Cyrus

2003-11-03 Thread Earl R Shannon
Bonjour, While there have been a couple of mentions that high availability is being considered by CMU, it has not been done natively to the IMAP server. In other words, the IMAP server does not do high availability. While it does have the cluster implementation, ( the murder ) this allows scalabil

Re: Moving mail to a new machine

2003-10-14 Thread Earl R Shannon
Hello, If its just you, ie, one account, the easiest way would probably been to simply drag and drop folders from one account (machine) to the other. This would of course require that both machines be up and running, which it sounds like you have. Failing that, what you need to realise is that a

Re: Disable leave a copy in cyrus pop

2003-10-10 Thread Earl R Shannon
Hello, I would view this as a user education issue. You need to make sure that your users are aware of the quota limitations and what they can do to remain under quota. I don't think you are going to be able to do what you suggest very easily, if its possible at all. And for finding out, its not a

SASL mechanism PLAIN advertising in IMAP capabilites

2003-10-01 Thread Earl R Shannon
Hello, I'm getting confused. I'm trying to have AUTH=PLAIN show up in the response to a capability query of the IMAP server. Here is what I currently get: /var/log # telnet uni99map 143 Trying 152.1.4.242... Connected to uni99map.unity.ncsu.edu. Escape character is '^]'. * OK uni99map.unity.ncsu.e

Re: wishlist for 2.2 final

2003-05-30 Thread Earl R Shannon
Hello, We had a situation where it might have helped us if we had been able to suspend new IMAP connections while leaving lmtpd running. We learned that the shutdown message will stop ALL new connections if the shutdown file exists. Perhaps a separate shutdown file could exist for lmtp, imap, pop,

Re: strange quota problem...

2003-03-31 Thread Earl R Shannon
Hello, Been here done this. The first place I would look is at the quota allotted to the folder. I'd bet real money that you haven't set a quota for the folder yet. Regards, Earl Shannon Andrzej Kwiatkowski wrote: I have installed postfix 2.0.7 with Cyrus Imapd 2.1.12. My problem is a bit strange.

Re: Cyrus in shared-only setup with no user inboxes?

2003-02-26 Thread Earl R Shannon
Hello, We are in the process of setting up a machine just to do shared folders. There will be no user accounts on the machine. Their accounts are on other servers. We use kerberos for authentication, so once the ACL for their id is setup all they need to do is create the "account" in the client th

Re: looking for Cyrus mail format documentation

2003-01-31 Thread Earl R Shannon
ke it easier for people to write their own applications? I would venture a guess to say that the API already exists in some form, it just needs to be formalized and published. Regards, Earl Shannon Rob Siemborski wrote: On Fri, 31 Jan 2003, Earl R Shannon wrote: Cyrus documentation calls the

Re: looking for Cyrus mail format documentation

2003-01-31 Thread Earl R Shannon
Hello, One of the disadvantage of using Cyrus might be that there is no API to the mail store other than the IMAP protocol. You simply cannot go mucking around the mail store with "external programs" without the potential to cause problems. That said, mail is stored in directories that map unto f

Re: problems with microsoft outlook?

2002-04-10 Thread Earl R Shannon
Hello, You did not mention which version of the IMAP server you are running. If its an older one it may not understand the STARTTLs command that an SSL'ed connection will probably use. I've had a couple of Outlook users have this problem with our current production server, but the newer version (

Re: multiple cyruses via SAN

2002-03-19 Thread Earl R Shannon
://www4.ncsu.edu/~ershanno Sean Witham wrote: > > Earl R Shannon wrote: > > > Hello, > > > > We would like to use a shared filesystem. Will ALL the accounts on > > each server. Then we would use a load balancing package ( Resonate ) > > in front of the serv

Re: multiple cyruses via SAN

2002-03-19 Thread Earl R Shannon
Hello, We would like to use a shared filesystem. Will ALL the accounts on each server. Then we would use a load balancing package ( Resonate ) in front of the servers. Should one server fail the service would continue. Network /\

Yet another signalled to death by 11

2002-03-19 Thread Earl R Shannon
Hello, I have a problem that may rapidly plunge me into a psychotic break. This is on Solaris 7 running cyrus imap 2.1.1. I've got the following mailer definitions in the sendmail.cf file to deliver mail to the cyrus imap mail store. ## ### Cyru

Re: Sasl Question.

2002-03-15 Thread Earl R Shannon
Hello, Let me first restate your question to make sure I understand it. First assumption is that your servers are imap servers. You have two servers, A and B. Server A is using sasl to authenticate users. You want to have Server B authenticate to Server A. This can be done, but there is at least

Re: troubleshooting sieve

2002-02-13 Thread Earl R Shannon
Hello, You have found what may be the biggest problems with free software. Documentation and Support. Sysadmins such as myself must take these issues into account when deciding upon a platform to use for delivery of services such as email. Using a package such as Cyrus requires a somewhat higher

Re: imap and folders

2002-02-08 Thread Earl R Shannon
Hello, I must admit that some email clients make it look like one should be able to create a folder at the same level as the users INBOX. This can never be allowed however. A client/user would essentially have the priveledge of creating accounts if they could do this. Not to mention the problems

Re: plain text authentification

2002-01-28 Thread Earl R Shannon
Hello, Athentication via PLAIN requires that one of several backend methods are available to do the actual authentication. In the SASL readme.html doc it lists sasldb, pwcheck daemon, or the saslauthd daemon. I believe you may also write a method of your own. We use the saslauthd daemon for seve

Re: Death by 11

2002-01-28 Thread Earl R Shannon
Hello, I initially thought this was a permissions issue when I saw similar messages. I've about convinced myself that its not and am now thinking that it may be a library issue, ie can't find the one it wants. My problem is that when sendmail invokes deliver, deliver dies with the signal 11. Has

Re: Using Cyrus imapd with AFS + KRB5 + krb524d ?

2002-01-28 Thread Earl R Shannon
Hello, We use AFS but do not have it doing anything for IMAP. Our authentication scheme sounds just like what you want to do however. I've only recently got something to compile and it looks like it will work, but it hasn't been tested extensively yet. Are you putting the user folders in AFS? O